Server.ScriptTimeOut

Hi All,

How can I limit the max value for Server.ScriptTimeout property?

A malicious user can run a script like this:

<%
Server.ScriptTimeOut = 3600 ' one hour
Do While True
Response.Write "fucking webserver..."
Loop
%>

This script will run looping for 1 hour. IIS server will crash or use all
memory avaliable...
My server has script timeout set to 15 seconds, but this setting is ignored
if the user modify the Server.ScriptTimeout property.

Any ideas?

Thank's

--
Marcelo Coelho

Rob
Thu Jan 29 16:10:19 CST 2004

"Marcelo Coelho" wrote ...

> How can I limit the max value for Server.ScriptTimeout property?

As you have it in your post I believe.

> A malicious user can run a script like this:
>
> <%
> Server.ScriptTimeOut = 3600 ' one hour
> Do While True
> Response.Write "fucking webserver..."
> Loop
> %>

I'd be asking myself how the malicious user got the ability to run their own
ASP scripts?

If its because they are hosted or have shared webspace with your account
thats a slightly different issue I guess....

If you have control of the server yourself you make each website have its
own application start point - I *believe* this would then result in only
that website being buggered and not the entire server...

I could be wrong...but if it were me I'd not be letting malicious users near
me box! :)

Rob